They are releasing more than just security updates, too. I've got two machines in the program and, while small, I have seen UI changes a couple times since ESU started. They aren't useful or anything, but they definitely aren't "security" updates.